RtlpOpenBaseImageFileOptionsKeyEx

NTSTATUS __fastcall RtlpOpenBaseImageFileOptionsKeyEx(_QWORD *a1){
  char v2; 
  unsigned int v3; 
  NTSTATUS result; 
  struct _OBJECT_ATTRIBUTES v5; 
  void *v6; 
  *(&v5.Length + 1) = 0;
  *(&v5.Attributes + 1) = 0;
  v6 = 0i64;
  v2 = *((_BYTE *)KeGetCurrentThread() + 562);
  v3 = 1600;
  v5.Length = 48;
  v5.RootDirectory = 0i64;
  if( v2 != 1 )
    v3 = 576;
  v5.Attributes = v3;
  v5.ObjectName = (_UNICODE_STRING *)&qword_140005A70;
  *(_OWORD *)&v5.SecurityDescriptor = 0i64;
  result = ZwOpenKey(&v6, 9u, &v5);
  if( result >= 0 )
  {
    *a1 = v6;
    return 0;
  }
  return result;
}

Referenced by: